$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: ZmUr/RWouZZn9h13k2P+UJOXbLjXN6SZa+LtK/YDKKk= Subject key identifier: 60:61:EB:C8:41:2D:82:AD:69:12:A0:FC:4F:71:C6:40:95:02:47:E6 Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 0119 Signing time: Fri 13 Jun 2025 03:47:48 +0000 Manifest this update: Fri 13 Jun 2025 03:47:48 +0000 Manifest next update: Fri 20 Jun 2025 03:47:48 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: MIsNbQcABCiJrtzgTt/kaTLMtjWzcFvzTnk6gs2/0Qo=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Jun 13 03:47:48 2025 GMT Not After : Jun 20 03:47:48 2025 GMT Subject: CN=684b9f64-45b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:6f:43:c0:81:47:e5:c8:2c:26:88:18:45: 6c:58:2b:33:14:a5:2b:4a:ca:59:ca:57:7d:66:88: b7:a7:42:e1:d7:42:ba:70:03:43:8c:e6:69:aa:22: 81:ca:c4:f4:0d:46:2f:43:c6:0f:b4:1b:fb:5c:27: e5:ae:e5:77:ea:f7:dc:07:9c:7c:01:89:dd:12:25: a3:73:c4:24:08:26:d7:e9:40:8a:58:11:56:bf:bc: c1:1b:bc:07:39:cc:74:71:5e:fc:1c:71:1e:ad:09: f6:ba:53:d2:7a:c5:50:0e:a1:77:5c:2e:7d:13:22: df:a7:ec:a6:75:fd:91:a3:4f:4b:33:0c:3a:fe:92: 86:8b:d4:5d:c5:c5:b0:57:bb:7d:28:b8:91:be:35: 34:e7:d8:4e:7e:8f:0f:75:9d:db:21:2a:0d:25:c5: f7:91:d0:34:b2:b0:14:31:c4:15:3c:b7:87:ff:f2: a3:86:cb:bd:05:37:ee:9c:66:9b:5d:32:3d:fa:6c: fb:e2:ba:80:a3:c7:7e:7b:c2:66:dc:3f:4f:d3:02: 21:3a:5d:83:3b:7f:e7:94:6c:82:2c:ad:dc:ea:0c: 0f:19:9b:5e:f6:92:f2:0b:24:50:95:89:76:13:78: 1e:5e:52:34:a4:8c:03:9d:7e:0e:09:04:f4:00:95: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:EB:C8:41:2D:82:AD:69:12:A0:FC:4F:71:C6:40:95:02:47:E6 X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:cf:79:93:c1:f3:0e:4c:7d:2b:6a:8c:78:7d:c1:bc:9f:ed: d6:b0:9d:2b:57:69:f3:ce:af:68:53:bd:12:0a:e4:c8:a6:d8: 80:83:83:b0:41:eb:d0:5a:fe:9b:73:d0:46:02:b5:3e:d4:cf: db:ac:58:e8:a0:87:4a:ee:4b:c1:a3:02:64:b0:08:8f:5a:27: bc:39:75:72:fa:08:b5:5f:83:b4:13:1d:95:92:32:a9:5b:80: 28:d9:5f:22:f5:78:30:07:ea:5d:20:e9:ce:0f:31:ee:f1:5d: ba:d8:4a:3d:cb:b9:e1:b6:06:20:9b:04:65:ab:fb:65:e4:89: b3:2e:5d:09:16:02:79:38:6f:56:99:cb:cf:9c:c0:9c:9f:19: b5:7e:8a:1b:cc:f1:78:82:8f:5b:95:f7:46:34:fb:18:90:3a: af:47:d7:3f:2a:c5:e7:36:2b:04:53:2c:d9:2b:40:ae:4a:51: 26:4b:ff:58:24:79:12:b7:e8:27:a8:a0:ed:a7:9b:13:21:09: e6:8f:a0:7d:d8:11:e1:2d:3b:bd:0f:7a:95:a1:0f:47:21:c3: 5e:91:40:fb:cf:b7:81:15:5a:29:52:66:2e:73:9f:0c:85:e0: dc:06:d3:72:9e:80:5f:02:8c:fc:11:f0:1a:ac:af:59:38:4e: d3:92:6c:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjUwNjEzMDM0NzQ4WhcNMjUwNjIwMDM0NzQ4WjAYMRYwFAYD VQQDEw02ODRiOWY2NC00NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj1vQ8CBR+XILCaIGEVsWCszFKUrSspZyld9Zoi3p0Lh10K6cANDjOZpqiKB ysT0DUYvQ8YPtBv7XCflruV36vfcB5x8AYndEiWjc8QkCCbX6UCKWBFWv7zBG7wH Ocx0cV78HHEerQn2ulPSesVQDqF3XC59EyLfp+ymdf2Ro09LMww6/pKGi9RdxcWw V7t9KLiRvjU059hOfo8PdZ3bISoNJcX3kdA0srAUMcQVPLeH//Kjhsu9BTfunGab XTI9+mz74rqAo8d+e8Jm3D9P0wIhOl2DO3/nlGyCLK3c6gwPGZte9pLyCyRQlYl2 E3geXlI0pIwDnX4OCQT0AJXonQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBh68hB LYKtaRKg/E9xxkCVAkfmMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXz3mTwfMOTH0raox4fcG8n+3WsJ0rV2nzzq9oU70SCuTIptiAg4Ow QevQWv6bc9BGArU+1M/brFjooIdK7kvBowJksAiPWie8OXVy+gi1X4O0Ex2VkjKp W4Ao2V8i9XgwB+pdIOnODzHu8V262Eo9y7nhtgYgmwRlq/tl5ImzLl0JFgJ5OG9W mcvPnMCcnxm1foobzPF4go9blfdGNPsYkDqvR9c/KsXnNisEUyzZK0CuSlEmS/9Y JHkSt+gnqKDtp5sTIQnmj6B92BHhLTu9D3qVoQ9HIcNekUD7z7eBFVopUmYuc58M heDcBtNynoBfAoz8EfAarK9ZOE7Tkmy4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:00:46 2025 by rpki-client